Western intelligence agencies are warning that China is using fake job offers, online recruiters, and consulting fronts to turn ordinary professional networking sites into hunting grounds for espionage.
On June 3, 2026, the Five Eyes intelligence alliance, which includes Australia, Canada, New Zealand, the United Kingdom, and the United States, issued a rare joint public warning about what it described as an aggressive Chinese intelligence campaign targeting people with access to sensitive government, military, technological, political, and scientific information.
The alert says Chinese military intelligence is using professional networking and job sites, including LinkedIn, Indeed, and Upwork, to reach Western professionals with fake consulting and recruitment offers.
China's Fake Job Offers
At the beginning, the Chinese operations look normal and innocent, usually starting with a message about a remote consulting job.
Targets are told they have been selected because of their expertise. The offer often appears professional, well-paid, and low-risk. The supposed recruiter may claim to represent a consulting firm, think tank, research company, or human resources agency based outside China. All of this makes it look legitimate, making the true purpose of the operations harder for targets to detect.
According to the Five Eyes alert, the people being approached include current and former security clearance holders, military personnel, defense analysts, foreign policy specialists, government employees, intelligence professionals, academics, journalists, and researchers. Those with knowledge of the Indo-Pacific region are considered especially valuable.
Once contact is established, the fake employer begins building trust. Only after the target is brought on as a contractor do the requests start. The new hire may be asked not only to write reports on foreign policy, defense, trade, China’s bilateral relations, and security issues in the Indo-Pacific, but also to explain their previous work or describe their professional background.
At first, these requests can appear harmless, but the pressure gradually increases. The fake employer may ask for more detailed material, more private analysis, or information that is not publicly available. Communication is often moved to encrypted messaging apps under the pretext of security. Payments may rise from a few hundred dollars to several thousand dollars as the requests become more sensitive.
The target may not realize who is really behind the job. They may believe they are doing freelance research, policy consulting, or private analysis for a normal client, while the information is being collected for a foreign intelligence service.
The Five Eyes Warning
Five Eyes officials warn that even unclassified information can be valuable when collected at scale. Details about government policy, military strategy, defense capabilities, facilities, personnel, or internal decision-making can be combined with other material to build a broader intelligence picture.
China's campaign shows how intelligence work has adapted to the remote-work economy. Instead of relying only on traditional spies, cyberattacks, or embassy-based operations, governments can now use the language of recruitment, consulting, and freelance work to reach thousands of potential targets across many different countries.
The threat is not limited to people currently inside government. Former officials, retired military personnel, think tank researchers, contractors, and policy specialists may also be attractive because they retain knowledge, contacts, and habits from their previous roles.
The warning comes as American authorities have moved directly against suspected parts of the network. On June 10, 2026, the FBI announced the seizure of 13 internet domains allegedly used by suspected Chinese agents to target current and former US security clearance holders.
According to FBI officials, the domains posed as consulting firms and were used to lure people with access to classified or sensitive government information. The fake sites allegedly advertised jobs, solicited reports, and sought to draw targets deeper into relationships that could benefit Chinese intelligence.
The Chinese Embassy in Washington rejected the allegations, calling them false and defamatory.
The New Spy Pipeline
The pattern echoes earlier instances in Britain where people linked to Parliament, public policy, and research circles were reportedly approached by suspicious recruiters offering money for political insight and access. In those cases, the goal was not only to obtain secrets, but to identify people who could be cultivated as sources over time.
The warning points to a broader shift in intelligence work. Social networks and professional platforms have made deception easier, allowing espionage to move beyond the old model of undercover agents operating inside hostile territory.
The future of spying will not depend only on stealing classified files. It will also depend on collecting small pieces of non-public knowledge from thousands of people who may not see themselves as intelligence targets. In that environment, platforms like LinkedIn, which offer access to millions of professional profiles, are no longer just career websites, but also spy recruitment grounds.
Loading comments...